PT-2025-31705 · Traefik+1 · Traefik+1

Odaysec · Published 2025-08-01 · Updated 2026-02-05 · CVE-2025-54386

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Traefik versions 2.11.27 and below Traefik versions 3.0.0 through 3.4.4 Traefik version 3.5.0-rc1

Description Traefik is an HTTP reverse proxy and load balancer. A path traversal vulnerability exists in the WASM Traefik’s plugin installation mechanism. Supplying a maliciously crafted ZIP archive containing file paths with ../ sequences allows an attacker to overwrite arbitrary files on the system outside of the intended plugin directory. This can lead to remote code execution (RCE), privilege escalation, persistence, or denial of service.

Recommendations Update to Traefik version 2.11.28 or later. Update to Traefik version 3.4.5 or later. Update to Traefik version 3.5.0 or later.

Exploit

Fix

RCE

DoS

LPE

Path traversal

Weakness Enumeration

CWE-30

CWE-22

Related Identifiers

ALT-PU-2025-11948

CVE-2025-54386

ECHO-6F33-0C94-3AAA

GHSA-Q6GG-9F92-R9WG

GO-2025-3835

OPENSUSE-SU-2025:15434-1

OPENSUSE-SU-2026:10143-1

SUSE-SU-2025:02912-1

Affected Products

Alt Linux

Traefik

References · 58

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/54xxx/CVE-2025-54386.json · Exploit
• https://github.com/traefik/traefik/pull/11911 · Patch
• https://github.com/traefik/traefik/security/advisories/GHSA-q6gg-9f92-r9wg · Vendor Advisory
• https://github.com/traefik/traefik/commit/5ef853a0c53068f69a6c229a5815a0dc6e0a8800 · Patch
• https://github.com/traefik/plugin-service/pull/71 · Patch
• https://github.com/traefik/plugin-service/pull/72 · Patch
• https://osv.dev/vulnerability/GHSA-q6gg-9f92-r9wg · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-54386 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:02912-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-54386 · Vendor Advisory
• https://osv.dev/vulnerability/GO-2025-3835 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:15434-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10143-1 · Vendor Advisory
• https://github.com/traefik/traefik · Note
• https://github.com/traefik/traefik/releases/tag/v2.11.28 · Note